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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND in accordance with the following: 

1 . (Currently Amended) A security management device including: 

a security detection unit to detect a security level of a user apparatus , bas e d upon an 
acc e ss r e cord of th e us e r apparatus acc e ss i ng a virus i nformat i on comput e r ; 

a judging unit to judge whether the security level of the user apparatus reaches a 
predetermined security level; and 

an access control unit, in case the judging unit judges the security level of the user 
apparatus does not reach the predetermined security level, to restrict as a restriction range an 
access permission range on a network of the user apparatus to be within a predetermined range 
on a network to wh i ch a s e cur i ty s e tt i ng gu i d e s e rv e r manag e m e nt d e v i c e b el ongs , wherein 

the security management device sends a program to the user apparatus and causes the 
user apparatus to set the security of the user apparatus by executing the program when the 
security level of the user apparatus does not reach the predetermined security level . 

2. (Previously Presented) A security management device according to Claim 1 , 
wherein the access control unit, in case the judging unit judges that the security level of the user 
apparatus reaches the predetermined level, sets a range wider than the restriction range as the 
access permission range of the user apparatus. 

3. (Currently Amended) A security management device according to Claim 1 , 
wherein the access control unit has a function of controlling a communication route of the user 
apparatus and, in case the judging unit judges that the security level of the user apparatus does 
not reach the predetermined level, as the restriction range controls a communication destination 
of the user apparatus to_a [[the]] security setting guide server management device. 
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4. (Previously Presented) A security management device according to Claim 3, 
wherein the security setting guide server management device controls updating the virus 
definition file of the user apparatus. 

5. (Currently Amended) A method of managing computer security comprising: 
detecting a security level of a user apparatus , bas e d upon an acc e ss r e cord of th e us e r 

apparatus acc e ss i ng a v i rus i nformat i on comput e r ; 

judging whether the security level of the user apparatus reaches a predetermined security 
level; [[and]] 

in case of judging the security level of the user apparatus does not reach the 
predetermined security level, restricting an access permission range on a network of the user 
apparatus to be within a predetermined range on a network to wh i ch a s e cur i ty s e tt i ng gu i d e 
s e rv e r manag e m e nt d e v i c e b el ongs ; 

sending a program to the user apparatus; and 

causing the user apparatus to set the security of the user apparatus by executing the 
program when the security level of the user apparatus does not reach the predetermined security 
level . 

6. (Previously Presented) A security management method according to Claim 5, 
wherein in case of judging the security level of the user apparatus reaches the predetermined 
level, setting a range wider than the restriction range as the access permission range of the user 
apparatus. 

7. (Currently Amended) A security management method according to Claim 5, 
wherein in case of judging the security level of the user apparatus does not reach the 
predetermined level, the restricting of the access permission range of the user apparatus 
comprises changing a communication destination of the user apparatus to_a [[the]] security 
setting guide server management device on the network. 

8. (Previously Presented) A security management method according to Claim 7, 
wherein the security setting guide server management device controls updating the virus 
definition file of the user apparatus. 

9. (Currently Amended) A non-transitory recording medium recorded with a security 
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management program for making a computer execute: 

detecting a security level of a user apparatus , bas e d upon an acc e ss r e cord of th e us e r 
apparatus acc e ss i ng a v i rus i nformat i on comput e r ; 

judging whether the security level of the user apparatus reaches a predetermined security 
level; [[and]] 

in case of judging the security level of the user apparatus does not reach the 
predetermined security level, restricting an access permission range on a network of the user 
apparatus to be within a predetermined range on a network to wh i ch a s e cur i ty s e tt i ng gu i d e 
s e rv e r manag e m e nt d e v i c e b el ongs; 

sending a program to the user apparatus; and 

causing the user apparatus to set the security of the user apparatus by executing the 
program when the security level of the user apparatus does not reach the predetermined security 
level . 

10. (Currently Amended) A non-transitory recording medium recorded with a security 
management program according to Claim 9, wherein in case of judging the security level of the 
user apparatus reaches the predetermined security level, setting a range wider than the 
restriction range as the access permission range of the user apparatus. 

1 1 . (Currently Amended) A non-transitory recording medium recorded with a security 
management program according to Claim 9, wherein in case of judging the security level of the 
user apparatus does not reach the predetermined security level, the restricting of the access 
permission range of the user apparatus comprises changing a communication destination of the 
user apparatus to_a [[the]] security setting guide server management device on the network. 

12. (Currently Amended) A non-transitory recording medium recorded with a security 
management program according to Claim 11, wherein the security setting guide server 
management device controls updating the virus definition file of the user apparatus. 

1 3. (Currently Amended) A security management system comprising: 
a security management device ; and [[,]] 

an apparatus for a user A and a s e cur i ty s e tt i ng gu i d e d e v i c e i n commun i cat i on v i a a 
wherein the security management device compr i s e s executes : 
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a s e cur i ty detection unit to detect d e tecting a security level of a user apparatus, 
bas e d upon an acc e ss r e cord of a us e r apparatus acc e ss i ng a v i rus i nformat i on comput e r; 

a judging unit to judge judg i ng whether the security level of the user apparatus 
reaches a predetermined security levelj[; and]] 

an access control unit, in case the judging unit judges the security level of the 
user apparatus does not reach the predetermined security level, to restrict r e str i ct i ng an access 
permission range on a network of the user apparatus to be within a predetermined range on a 
network to wh i ch th e s e cur i ty s e tt i ng gu i d e s e rver manag e m e nt d e v i c e b el ongs , and 

a sending unit to send a program to the user apparatus and to cause the user 
apparatus to set the security of the user apparatus by executing the program, when the security 
level of the user apparatus does not reach the predetermined security level . 

14. (Previously Presented) A security management system according to Claim 13, 
wherein the access control unit, in case the judging unit judges the security level of the user 
apparatus does not reach the predetermined security level, connects the user apparatus to the 
security setting guide device. 

15-18. (Cancelled) 

1 9. (Previously Presented) The security management device according to Claim 1 , 
wherein the user apparatus is established to afford the network. 

20. (Previously Presented) The security management device according to claim 1 , 
wherein the access control unit, in case the judging unit judges that the security level of the user 
apparatus has reached the predetermined security level, does not restrict the access permission 
range on the network of the user apparatus. 

21 . (Previously Presented) The security management method according to Claim 5, 
wherein the user apparatus is established to afford the network. 

22. (Previously Presented) The security management method according to claim 5, 
wherein in the case when it is judged that the security level of the user apparatus has reached 
the predetermined security level, the access permission range on the network of the user 
apparatus is not restricted. 
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23. (Previously Presented) The security management system according to Claim 13, 
wherein the user apparatus is established to afford the network. 

24. (Previously Presented) The security management system according to claim 13, 
wherein the access control unit of the security management system, in case the judging unit 
judges that the security level of the user apparatus has reached the predetermined security level, 
does not restrict the access permission range on the network of the user apparatus. 

25-28. (Cancelled) 

29. (Currently Amended) A security management device comprising: 

a security detection unit to detect a security level of a user apparatus , bas e d upon a v i rus 
d e f i n i t i on f ile of th e us e r apparatus ; 

a judging unit to judge whether the security level of the user apparatus reaches a 
predetermined security level; and 

an access control unit to restrict an access permission range on a network of the user 
apparatus within a first range on a network to wh i ch a s e cur i ty s e tt i ng gu i d e s e rv e r manag e m e nt 
d e v i c e b el ongs when the judging unit judges the security level of the user apparatus does not 
reach the predetermined security level, and to set the access permission range on the network to 
a second range that exceeds the first range when the judging unit judges the security level of the 
user apparatus reaches the predetermined security level , wherein 

the security management device sends a program to the user apparatus and causes the 
user apparatus to set the security of the user apparatus by executing the program when the 
security level of the user apparatus does not reach the predetermined security level . 

30. (Previously Presented) The security management device according to claim 29, 
wherein the access control unit restricts the user apparatus to access and/or become accessible 
to apparatuses within the first range on the network including the security management device 
and an apparatus that provides the virus definition file to the user apparatus. 
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